General
- Target 2026-07-02_73d4ef4006cb9b0fd05491cfefaf3291_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader
- Size 19.2MB
- Sample260702-nlv8saft2l
- SHA256 718520f3f1c9ac3623d21650b005e7e5a561eaf4f0eedbc2fafdfb3d82819b6e
- MD5 73d4ef4006cb9b0fd05491cfefaf3291
- SHA1 a748aab44dc4d9ab835fd69f5ab785169bcd582c
- SHA512 4635d3982eef4b460ba39d91527d677f3c6d3bf8b73154cc732d742438703df9b778296c8b8d51570cffca09ab7a4381573f00d51ecca2d8c065814da1615ebe
- SSDEEP 196608:fNiquFIF0wuPlCKrjRvN7quFIF0wuPlCKrjRvNiquFIF0wuPlCKrjRvN:fNboUm1NWoUm1NboUm1N
- TLSH T181179D1273D84035F5B31631993592195A7ABCA58F33CA9F328C2D9E7FB16808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-02_73d4ef4006cb9b0fd05491cfefaf3291_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_73d4ef4006cb9b0fd05491cfefaf3291_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_73d4ef4006cb9b0fd05491cfefaf3291_agent-tesla_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader
- Size 19.2MB
- SHA256 718520f3f1c9ac3623d21650b005e7e5a561eaf4f0eedbc2fafdfb3d82819b6e
- MD5 73d4ef4006cb9b0fd05491cfefaf3291
- SHA1 a748aab44dc4d9ab835fd69f5ab785169bcd582c
- SHA512 4635d3982eef4b460ba39d91527d677f3c6d3bf8b73154cc732d742438703df9b778296c8b8d51570cffca09ab7a4381573f00d51ecca2d8c065814da1615ebe
- SSDEEP 196608:fNiquFIF0wuPlCKrjRvN7quFIF0wuPlCKrjRvNiquFIF0wuPlCKrjRvN:fNboUm1NWoUm1NboUm1N
- TLSH T181179D1273D84035F5B31631993592195A7ABCA58F33CA9F328C2D9E7FB16808A39737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.